[lug] Cisco 675 router

[Brian Ketelsen]

The safest way to configure the DSL is to turn off all reverse NAT
translation, then disable telnet access into the router.  Also, it's
EXTREMELY important to turn off the stupid web management interface on the
675 as well.  That way you can only manage the router from the serial
connection and you have no incoming ports mapped to your network.  Of
course, this is unreasonable if you want to telnet into your machines or run
a web server.   Personally, I have the router web and telnet turned off but
I have 2 UDP ports reverse NAT translated so I can run an UnrealTournament
server.  It's relatively safe because the ports are high enough not to get
scanned frequently by unfriendly people and they're not common ports.

Brian


----- Original Message -----
From: "tpatnoe" <tpatnoe at peakss.com>
To: <lug at lug.boulder.co.us>
Sent: Wednesday, June 07, 2000 2:38 PM
Subject: Re: [lug] Cisco 675 router


> I love this list. Where else would I find out about the cool things I
> didn't know I didn't know! Now I'm just paranoid that I don't have good
> security on my system thinking I was safe behind DSL.
>
> Jason Vallery wrote:
> >
> > >
> > > You may be thinking of :
> > >
> > > http://www.dyndns.org/
> >
> > Another is http://www.dhs.org/
> >
> > _______________________________________________
> > Web Page:  http://lug.boulder.co.us
> > Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
>
> --
> Tory Patnoe                    tpatnoe at peakss.com
> Peak Software Solutions        303-734-5031
>
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug